Read the docs

Wpattire

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Wpattire records in CISA KEV

No Wpattire vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Attire 1 record MEDIUM Attire Blocks 1 record LOW

Records

2 records

TI-2024-06889 CVE-2024-7435 · GHSA-4chv-vwgx-q584

Attire <= 2.0.6 - Authenticated (Contributor+) PHP Object Injection

Priority MEDIUM 41

The Attire theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.0.6 via deserialization of untrusted input.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00707 Published 2024-08-31 No fix listed CWE-502
TI-2024-03808 CVE-2024-4088 · GHSA-47g9-gpgw-3pq5

Gutenberg Blocks and Page Layouts – Attire Blocks <= 1.9.2 - Missing Authorization

Priority LOW 20

The Gutenberg Blocks and Page Layouts – Attire Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable_fe_assets function in all versions up to, and…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0028 Published 2024-06-05 No fix listed CWE-862
Open these records in search →